ZITADEL is an open source identity management platform. From version 4.0.0 to 4.12.0, a vulnerability in Zitadel's login V2 UI allowed users to bypass login behavior and security policies and self-register new accounts or sign in using password even if corresponding options were disabled in their organizaton. This issue has been patched in version 4.12.1.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
Advisories
| Source | ID | Title |
|---|---|---|
 Github GHSA |
GHSA-25rw-g6ff-fmg8 | ZITADEL: Login V2 UI Policy Bypass Allows Unauthorized Self-Registration and Authentication |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Sat, 07 Mar 2026 15:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | ZITADEL is an open source identity management platform. From version 4.0.0 to 4.12.0, a vulnerability in Zitadel's login V2 UI allowed users to bypass login behavior and security policies and self-register new accounts or sign in using password even if corresponding options were disabled in their organizaton. This issue has been patched in version 4.12.1. | |
| Title | ZITADEL: Bypassing Zitadel Login Behavior and Security Policy in Login V2 | |
| Weaknesses | CWE-287 | |
| References |
| |
| Metrics |
cvssV3_1
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: GitHub_M
Published:
Updated: 2026-03-07T15:11:06.415Z
Reserved: 2026-03-04T14:44:00.715Z
Link: CVE-2026-29193
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-03-07T15:15:55.867
Modified: 2026-03-07T15:15:55.867
Link: CVE-2026-29193
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses